AuthenticationUtil.java

package com.jsql.util;

import com.jsql.model.InjectionModel;
import org.apache.commons.lang3.StringUtils;
import org.apache.logging.log4j.LogManager;
import org.apache.logging.log4j.Logger;

import java.io.File;
import java.net.Authenticator;
import java.net.PasswordAuthentication;
import java.util.prefs.Preferences;

/**
 * Manage authentication protocols Basic, Digest, NTLM and Kerberos.
 * Java class Authenticator processes Basic, Digest and NTLM, library spnego
 * processes kerberos.
 */
public class AuthenticationUtil {
    
    /**
     * Log4j logger sent to view.
     */
    private static final Logger LOGGER = LogManager.getRootLogger();
    
    /**
     * True if standard authentication Basic, Digest, NTLM is activated.
     */
    private boolean isAuthentication = false;

    /**
     * Login for standard authentication.
     */
    private String usernameAuthentication;

    /**
     * Pass for standard authentication.
     */
    private String passwordAuthentication;
    
    /**
     * True if kerberos authentication is activated.
     */
    private boolean isKerberos = false;

    /**
     * Path to the kerberos file login.
     */
    private String pathKerberosLogin;

    /**
     * Path to the kerberos file krb5.
     */
    private String pathKerberosKrb5;

    /**
     * Get new authentication settings from the view, update the utility class,
     * persist settings to the JVM and apply changes to the system.
     * @param isAuthentication true if non-kerberos authentication is activated
     * @param usernameAuthentication login for standard authentication
     * @param passwordAuthentication pass for standard authentication
     * @param isKerberos true if krb authentication is activated
     * @param kerberosKrb5Conf path to the file krb5
     * @param kerberosLoginConf path to the file login
     */
    public boolean set(
        boolean isAuthentication,
        String usernameAuthentication,
        String passwordAuthentication,
        boolean isKerberos,
        String kerberosKrb5Conf,
        String kerberosLoginConf
    ) {
        boolean isRestartRequired = this.initKerberos(isKerberos, kerberosKrb5Conf, kerberosLoginConf);
        this.initSimpleAuthorization(isAuthentication, usernameAuthentication, passwordAuthentication);
        this.setAuthentication();
        return isRestartRequired;
    }

    public void initSimpleAuthorization(boolean isAuthentication, String usernameAuthentication, String passwordAuthentication) {
        var preferences = Preferences.userRoot().node(InjectionModel.class.getName());
        preferences.putBoolean("isAuthentication", isAuthentication);
        preferences.put("usernameAuthentication", usernameAuthentication);
        preferences.put("passwordAuthentication", passwordAuthentication);
        // Define proxy settings
        this.isAuthentication = isAuthentication;
        this.usernameAuthentication = usernameAuthentication;
        this.passwordAuthentication = passwordAuthentication;
    }

    private boolean initKerberos(boolean isKerberos, String kerberosKrb5Conf, String kerberosLoginConf) {
        // Persist to JVM
        var preferences = Preferences.userRoot().node(InjectionModel.class.getName());
        
        this.isKerberos = isKerberos;
        this.pathKerberosKrb5 = kerberosKrb5Conf;
        this.pathKerberosLogin = kerberosLoginConf;
        
        // Check if krb file has changed
        boolean isRestartRequired = this.isKerberos
            && !new File(this.pathKerberosKrb5).exists()
            && !kerberosKrb5Conf.equals(this.pathKerberosKrb5);
        
        preferences.putBoolean("enableKerberos", this.isKerberos);
        preferences.put("kerberosKrb5Conf", this.pathKerberosKrb5);
        preferences.put("kerberosLoginConf", this.pathKerberosLogin);
        
        // Check krb integrity
        if (this.isKerberos) {
            // Fix #23877: NoClassDefFoundError on java/nio/file/Paths
            if (!new File(this.pathKerberosKrb5).exists()) {
                LOGGER.log(LogLevelUtil.CONSOLE_ERROR, "Krb5 file not found: {}", this.pathKerberosKrb5);
            }
            if (!new File(this.pathKerberosLogin).exists()) {
                LOGGER.log(LogLevelUtil.CONSOLE_ERROR, "Login file not found: {}", this.pathKerberosLogin);
            }
        }
        return isRestartRequired;
    }
    
    /**
     * Initialize the utility class with preferences from the JVM
     * and apply environment settings.
     */
    public void setKerberosCifs() {
        // Use Preferences API to persist proxy configuration
        var preferences = Preferences.userRoot().node(InjectionModel.class.getName());

        // Default proxy disabled
        this.isAuthentication = preferences.getBoolean("isAuthentication", false);

        // Default TOR config
        this.usernameAuthentication = preferences.get("usernameAuthentication", StringUtils.EMPTY);
        this.passwordAuthentication = preferences.get("passwordAuthentication", StringUtils.EMPTY);
        
        this.isKerberos = preferences.getBoolean("enableKerberos", false);
        this.pathKerberosKrb5 = preferences.get("kerberosKrb5Conf", StringUtils.EMPTY);
        this.pathKerberosLogin = preferences.get("kerberosLoginConf", StringUtils.EMPTY);
        
        this.setAuthentication();
    }
    
    /**
     * Apply kerberos authentication to the JVM.
     */
    public void setAuthentication() {
        Authenticator.setDefault(null);
        if (this.isAuthentication) {
            Authenticator.setDefault(new Authenticator() {
                @Override
                protected PasswordAuthentication getPasswordAuthentication() {
                    return new PasswordAuthentication (
                        AuthenticationUtil.this.usernameAuthentication,
                        AuthenticationUtil.this.passwordAuthentication.toCharArray()
                    );
                }
            });
        } else {
            Authenticator.setDefault(null);
        }
        if (this.isKerberos) {
            System.setProperty("java.security.krb5.conf", this.pathKerberosKrb5);
            System.setProperty("java.security.auth.login.config", this.pathKerberosLogin);
            System.setProperty("spnego.krb5.conf", this.pathKerberosKrb5);
            System.setProperty("spnego.login.conf", this.pathKerberosLogin);
        } else {
            System.setProperty("java.security.krb5.conf", StringUtils.EMPTY);
            System.setProperty("java.security.auth.login.config", StringUtils.EMPTY);
            System.setProperty("spnego.krb5.conf", StringUtils.EMPTY);
            System.setProperty("spnego.login.conf", StringUtils.EMPTY);
        }
    }
    
    
    // Getters and setters

    public boolean isAuthentEnabled() {
        return this.isAuthentication;
    }

    public String getPathKerberosLogin() {
        return this.pathKerberosLogin;
    }

    public String getPathKerberosKrb5() {
        return this.pathKerberosKrb5;
    }

    public boolean isKerberos() {
        return this.isKerberos;
    }

    public String getUsernameAuthentication() {
        return this.usernameAuthentication;
    }

    public String getPasswordAuthentication() {
        return this.passwordAuthentication;
    }
    
    
    // Builder
    
    public AuthenticationUtil withAuthenticationEnabled() {
        this.isAuthentication = true;
        return this;
    }
    
    public AuthenticationUtil withUsernameAuthentication(String usernameAuthentication) {
        this.usernameAuthentication = usernameAuthentication;
        return this;
    }
    
    public AuthenticationUtil withPasswordAuthentication(String passwordAuthentication) {
        this.passwordAuthentication = passwordAuthentication;
        return this;
    }
}


































Active mutators

CONDITIONALS_BOUNDARY
EMPTY_RETURNS
FALSE_RETURNS
INCREMENTS
INVERT_NEGS
MATH
NEGATE_CONDITIONALS
NULL_RETURNS
PRIMITIVE_RETURNS
TRUE_RETURNS
VOID_METHOD_CALLS

Tests examined

Report generated by PIT 1.19.1

1		package com.jsql.util;
2
3		import com.jsql.model.InjectionModel;
4		import org.apache.commons.lang3.StringUtils;
5		import org.apache.logging.log4j.LogManager;
6		import org.apache.logging.log4j.Logger;
7
8		import java.io.File;
9		import java.net.Authenticator;
10		import java.net.PasswordAuthentication;
11		import java.util.prefs.Preferences;
12
13		/**
14		* Manage authentication protocols Basic, Digest, NTLM and Kerberos.
15		* Java class Authenticator processes Basic, Digest and NTLM, library spnego
16		* processes kerberos.
17		*/
18		public class AuthenticationUtil {
19
20		/**
21		* Log4j logger sent to view.
22		*/
23		private static final Logger LOGGER = LogManager.getRootLogger();
24
25		/**
26		* True if standard authentication Basic, Digest, NTLM is activated.
27		*/
28		private boolean isAuthentication = false;
29
30		/**
31		* Login for standard authentication.
32		*/
33		private String usernameAuthentication;
34
35		/**
36		* Pass for standard authentication.
37		*/
38		private String passwordAuthentication;
39
40		/**
41		* True if kerberos authentication is activated.
42		*/
43		private boolean isKerberos = false;
44
45		/**
46		* Path to the kerberos file login.
47		*/
48		private String pathKerberosLogin;
49
50		/**
51		* Path to the kerberos file krb5.
52		*/
53		private String pathKerberosKrb5;
54
55		/**
56		* Get new authentication settings from the view, update the utility class,
57		* persist settings to the JVM and apply changes to the system.
58		* @param isAuthentication true if non-kerberos authentication is activated
59		* @param usernameAuthentication login for standard authentication
60		* @param passwordAuthentication pass for standard authentication
61		* @param isKerberos true if krb authentication is activated
62		* @param kerberosKrb5Conf path to the file krb5
63		* @param kerberosLoginConf path to the file login
64		*/
65		public boolean set(
66		boolean isAuthentication,
67		String usernameAuthentication,
68		String passwordAuthentication,
69		boolean isKerberos,
70		String kerberosKrb5Conf,
71		String kerberosLoginConf
72		) {
73		boolean isRestartRequired = this.initKerberos(isKerberos, kerberosKrb5Conf, kerberosLoginConf);
74	1 1. set : removed call to com/jsql/util/AuthenticationUtil::initSimpleAuthorization → NO_COVERAGE	this.initSimpleAuthorization(isAuthentication, usernameAuthentication, passwordAuthentication);
75	1 1. set : removed call to com/jsql/util/AuthenticationUtil::setAuthentication → NO_COVERAGE	this.setAuthentication();
76	2 1. set : replaced boolean return with true for com/jsql/util/AuthenticationUtil::set → NO_COVERAGE 2. set : replaced boolean return with false for com/jsql/util/AuthenticationUtil::set → NO_COVERAGE	return isRestartRequired;
77		}
78
79		public void initSimpleAuthorization(boolean isAuthentication, String usernameAuthentication, String passwordAuthentication) {
80		var preferences = Preferences.userRoot().node(InjectionModel.class.getName());
81	1 1. initSimpleAuthorization : removed call to java/util/prefs/Preferences::putBoolean → NO_COVERAGE	preferences.putBoolean("isAuthentication", isAuthentication);
82	1 1. initSimpleAuthorization : removed call to java/util/prefs/Preferences::put → NO_COVERAGE	preferences.put("usernameAuthentication", usernameAuthentication);
83	1 1. initSimpleAuthorization : removed call to java/util/prefs/Preferences::put → NO_COVERAGE	preferences.put("passwordAuthentication", passwordAuthentication);
84		// Define proxy settings
85		this.isAuthentication = isAuthentication;
86		this.usernameAuthentication = usernameAuthentication;
87		this.passwordAuthentication = passwordAuthentication;
88		}
89
90		private boolean initKerberos(boolean isKerberos, String kerberosKrb5Conf, String kerberosLoginConf) {
91		// Persist to JVM
92		var preferences = Preferences.userRoot().node(InjectionModel.class.getName());
93
94		this.isKerberos = isKerberos;
95		this.pathKerberosKrb5 = kerberosKrb5Conf;
96		this.pathKerberosLogin = kerberosLoginConf;
97
98		// Check if krb file has changed
99	1 1. initKerberos : negated conditional → NO_COVERAGE	boolean isRestartRequired = this.isKerberos
100	1 1. initKerberos : negated conditional → NO_COVERAGE	&& !new File(this.pathKerberosKrb5).exists()
101	1 1. initKerberos : negated conditional → NO_COVERAGE	&& !kerberosKrb5Conf.equals(this.pathKerberosKrb5);
102
103	1 1. initKerberos : removed call to java/util/prefs/Preferences::putBoolean → NO_COVERAGE	preferences.putBoolean("enableKerberos", this.isKerberos);
104	1 1. initKerberos : removed call to java/util/prefs/Preferences::put → NO_COVERAGE	preferences.put("kerberosKrb5Conf", this.pathKerberosKrb5);
105	1 1. initKerberos : removed call to java/util/prefs/Preferences::put → NO_COVERAGE	preferences.put("kerberosLoginConf", this.pathKerberosLogin);
106
107		// Check krb integrity
108	1 1. initKerberos : negated conditional → NO_COVERAGE	if (this.isKerberos) {
109		// Fix #23877: NoClassDefFoundError on java/nio/file/Paths
110	1 1. initKerberos : negated conditional → NO_COVERAGE	if (!new File(this.pathKerberosKrb5).exists()) {
111		LOGGER.log(LogLevelUtil.CONSOLE_ERROR, "Krb5 file not found: {}", this.pathKerberosKrb5);
112		}
113	1 1. initKerberos : negated conditional → NO_COVERAGE	if (!new File(this.pathKerberosLogin).exists()) {
114		LOGGER.log(LogLevelUtil.CONSOLE_ERROR, "Login file not found: {}", this.pathKerberosLogin);
115		}
116		}
117	2 1. initKerberos : replaced boolean return with false for com/jsql/util/AuthenticationUtil::initKerberos → NO_COVERAGE 2. initKerberos : replaced boolean return with true for com/jsql/util/AuthenticationUtil::initKerberos → NO_COVERAGE	return isRestartRequired;
118		}
119
120		/**
121		* Initialize the utility class with preferences from the JVM
122		* and apply environment settings.
123		*/
124		public void setKerberosCifs() {
125		// Use Preferences API to persist proxy configuration
126		var preferences = Preferences.userRoot().node(InjectionModel.class.getName());
127
128		// Default proxy disabled
129		this.isAuthentication = preferences.getBoolean("isAuthentication", false);
130
131		// Default TOR config
132		this.usernameAuthentication = preferences.get("usernameAuthentication", StringUtils.EMPTY);
133		this.passwordAuthentication = preferences.get("passwordAuthentication", StringUtils.EMPTY);
134
135		this.isKerberos = preferences.getBoolean("enableKerberos", false);
136		this.pathKerberosKrb5 = preferences.get("kerberosKrb5Conf", StringUtils.EMPTY);
137		this.pathKerberosLogin = preferences.get("kerberosLoginConf", StringUtils.EMPTY);
138
139	1 1. setKerberosCifs : removed call to com/jsql/util/AuthenticationUtil::setAuthentication → NO_COVERAGE	this.setAuthentication();
140		}
141
142		/**
143		* Apply kerberos authentication to the JVM.
144		*/
145		public void setAuthentication() {
146	1 1. setAuthentication : removed call to java/net/Authenticator::setDefault → NO_COVERAGE	Authenticator.setDefault(null);
147	1 1. setAuthentication : negated conditional → NO_COVERAGE	if (this.isAuthentication) {
148	1 1. setAuthentication : removed call to java/net/Authenticator::setDefault → NO_COVERAGE	Authenticator.setDefault(new Authenticator() {
149		@Override
150		protected PasswordAuthentication getPasswordAuthentication() {
151	1 1. getPasswordAuthentication : replaced return value with null for com/jsql/util/AuthenticationUtil$1::getPasswordAuthentication → NO_COVERAGE	return new PasswordAuthentication (
152		AuthenticationUtil.this.usernameAuthentication,
153		AuthenticationUtil.this.passwordAuthentication.toCharArray()
154		);
155		}
156		});
157		} else {
158	1 1. setAuthentication : removed call to java/net/Authenticator::setDefault → NO_COVERAGE	Authenticator.setDefault(null);
159		}
160	1 1. setAuthentication : negated conditional → NO_COVERAGE	if (this.isKerberos) {
161		System.setProperty("java.security.krb5.conf", this.pathKerberosKrb5);
162		System.setProperty("java.security.auth.login.config", this.pathKerberosLogin);
163		System.setProperty("spnego.krb5.conf", this.pathKerberosKrb5);
164		System.setProperty("spnego.login.conf", this.pathKerberosLogin);
165		} else {
166		System.setProperty("java.security.krb5.conf", StringUtils.EMPTY);
167		System.setProperty("java.security.auth.login.config", StringUtils.EMPTY);
168		System.setProperty("spnego.krb5.conf", StringUtils.EMPTY);
169		System.setProperty("spnego.login.conf", StringUtils.EMPTY);
170		}
171		}
172
173
174		// Getters and setters
175
176		public boolean isAuthentEnabled() {
177	2 1. isAuthentEnabled : replaced boolean return with false for com/jsql/util/AuthenticationUtil::isAuthentEnabled → NO_COVERAGE 2. isAuthentEnabled : replaced boolean return with true for com/jsql/util/AuthenticationUtil::isAuthentEnabled → NO_COVERAGE	return this.isAuthentication;
178		}
179
180		public String getPathKerberosLogin() {
181	1 1. getPathKerberosLogin : replaced return value with "" for com/jsql/util/AuthenticationUtil::getPathKerberosLogin → NO_COVERAGE	return this.pathKerberosLogin;
182		}
183
184		public String getPathKerberosKrb5() {
185	1 1. getPathKerberosKrb5 : replaced return value with "" for com/jsql/util/AuthenticationUtil::getPathKerberosKrb5 → NO_COVERAGE	return this.pathKerberosKrb5;
186		}
187
188		public boolean isKerberos() {
189	2 1. isKerberos : replaced boolean return with true for com/jsql/util/AuthenticationUtil::isKerberos → NO_COVERAGE 2. isKerberos : replaced boolean return with false for com/jsql/util/AuthenticationUtil::isKerberos → NO_COVERAGE	return this.isKerberos;
190		}
191
192		public String getUsernameAuthentication() {
193	1 1. getUsernameAuthentication : replaced return value with "" for com/jsql/util/AuthenticationUtil::getUsernameAuthentication → NO_COVERAGE	return this.usernameAuthentication;
194		}
195
196		public String getPasswordAuthentication() {
197	1 1. getPasswordAuthentication : replaced return value with "" for com/jsql/util/AuthenticationUtil::getPasswordAuthentication → NO_COVERAGE	return this.passwordAuthentication;
198		}
199
200
201		// Builder
202
203		public AuthenticationUtil withAuthenticationEnabled() {
204		this.isAuthentication = true;
205	1 1. withAuthenticationEnabled : replaced return value with null for com/jsql/util/AuthenticationUtil::withAuthenticationEnabled → NO_COVERAGE	return this;
206		}
207
208		public AuthenticationUtil withUsernameAuthentication(String usernameAuthentication) {
209		this.usernameAuthentication = usernameAuthentication;
210	1 1. withUsernameAuthentication : replaced return value with null for com/jsql/util/AuthenticationUtil::withUsernameAuthentication → NO_COVERAGE	return this;
211		}
212
213		public AuthenticationUtil withPasswordAuthentication(String passwordAuthentication) {
214		this.passwordAuthentication = passwordAuthentication;
215	1 1. withPasswordAuthentication : replaced return value with null for com/jsql/util/AuthenticationUtil::withPasswordAuthentication → NO_COVERAGE	return this;
216		}
217		}
		Mutations
74		1.1 Location : set Killed by : none removed call to com/jsql/util/AuthenticationUtil::initSimpleAuthorization → NO_COVERAGE
75		1.1 Location : set Killed by : none removed call to com/jsql/util/AuthenticationUtil::setAuthentication → NO_COVERAGE
76		1.1 Location : set Killed by : none replaced boolean return with true for com/jsql/util/AuthenticationUtil::set → NO_COVERAGE 2.2 Location : set Killed by : none replaced boolean return with false for com/jsql/util/AuthenticationUtil::set → NO_COVERAGE
81		1.1 Location : initSimpleAuthorization Killed by : none removed call to java/util/prefs/Preferences::putBoolean → NO_COVERAGE
82		1.1 Location : initSimpleAuthorization Killed by : none removed call to java/util/prefs/Preferences::put → NO_COVERAGE
83		1.1 Location : initSimpleAuthorization Killed by : none removed call to java/util/prefs/Preferences::put → NO_COVERAGE
99		1.1 Location : initKerberos Killed by : none negated conditional → NO_COVERAGE
100		1.1 Location : initKerberos Killed by : none negated conditional → NO_COVERAGE
101		1.1 Location : initKerberos Killed by : none negated conditional → NO_COVERAGE
103		1.1 Location : initKerberos Killed by : none removed call to java/util/prefs/Preferences::putBoolean → NO_COVERAGE
104		1.1 Location : initKerberos Killed by : none removed call to java/util/prefs/Preferences::put → NO_COVERAGE
105		1.1 Location : initKerberos Killed by : none removed call to java/util/prefs/Preferences::put → NO_COVERAGE
108		1.1 Location : initKerberos Killed by : none negated conditional → NO_COVERAGE
110		1.1 Location : initKerberos Killed by : none negated conditional → NO_COVERAGE
113		1.1 Location : initKerberos Killed by : none negated conditional → NO_COVERAGE
117		1.1 Location : initKerberos Killed by : none replaced boolean return with false for com/jsql/util/AuthenticationUtil::initKerberos → NO_COVERAGE 2.2 Location : initKerberos Killed by : none replaced boolean return with true for com/jsql/util/AuthenticationUtil::initKerberos → NO_COVERAGE
139		1.1 Location : setKerberosCifs Killed by : none removed call to com/jsql/util/AuthenticationUtil::setAuthentication → NO_COVERAGE
146		1.1 Location : setAuthentication Killed by : none removed call to java/net/Authenticator::setDefault → NO_COVERAGE
147		1.1 Location : setAuthentication Killed by : none negated conditional → NO_COVERAGE
148		1.1 Location : setAuthentication Killed by : none removed call to java/net/Authenticator::setDefault → NO_COVERAGE
151		1.1 Location : getPasswordAuthentication Killed by : none replaced return value with null for com/jsql/util/AuthenticationUtil$1::getPasswordAuthentication → NO_COVERAGE
158		1.1 Location : setAuthentication Killed by : none removed call to java/net/Authenticator::setDefault → NO_COVERAGE
160		1.1 Location : setAuthentication Killed by : none negated conditional → NO_COVERAGE
177		1.1 Location : isAuthentEnabled Killed by : none replaced boolean return with false for com/jsql/util/AuthenticationUtil::isAuthentEnabled → NO_COVERAGE 2.2 Location : isAuthentEnabled Killed by : none replaced boolean return with true for com/jsql/util/AuthenticationUtil::isAuthentEnabled → NO_COVERAGE
181		1.1 Location : getPathKerberosLogin Killed by : none replaced return value with "" for com/jsql/util/AuthenticationUtil::getPathKerberosLogin → NO_COVERAGE
185		1.1 Location : getPathKerberosKrb5 Killed by : none replaced return value with "" for com/jsql/util/AuthenticationUtil::getPathKerberosKrb5 → NO_COVERAGE
189		1.1 Location : isKerberos Killed by : none replaced boolean return with true for com/jsql/util/AuthenticationUtil::isKerberos → NO_COVERAGE 2.2 Location : isKerberos Killed by : none replaced boolean return with false for com/jsql/util/AuthenticationUtil::isKerberos → NO_COVERAGE
193		1.1 Location : getUsernameAuthentication Killed by : none replaced return value with "" for com/jsql/util/AuthenticationUtil::getUsernameAuthentication → NO_COVERAGE
197		1.1 Location : getPasswordAuthentication Killed by : none replaced return value with "" for com/jsql/util/AuthenticationUtil::getPasswordAuthentication → NO_COVERAGE
205		1.1 Location : withAuthenticationEnabled Killed by : none replaced return value with null for com/jsql/util/AuthenticationUtil::withAuthenticationEnabled → NO_COVERAGE
210		1.1 Location : withUsernameAuthentication Killed by : none replaced return value with null for com/jsql/util/AuthenticationUtil::withUsernameAuthentication → NO_COVERAGE
215		1.1 Location : withPasswordAuthentication Killed by : none replaced return value with null for com/jsql/util/AuthenticationUtil::withPasswordAuthentication → NO_COVERAGE

AuthenticationUtil.java

Mutations

Active mutators

Tests examined